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Declatatjoa of Pawan Gipval 

I, Pawan Goyal, heasdjy declare fee fofloAving: 

1 . I amfee inventor of fee invration described and chdn»d ia IMted Statra 
Patent AppUpation Serial Number 09/503^5, entWiKl "Reeling C<MWttnic9tiQft of 
Selected Processes to a Set of Specific Networic Addresses," filed on Pdteuaiy 14* 2000 
(hereafter "fee A|5)licatipn"). 

2. I was employed by Ensim Goipoi»tion fEnsim*OfiomJai^ 
January 2002. My titie at Ensim was Engineering Director. BMim has a pIace of 
business at 1366 B(»iegsas Aveone, Sunnyvale, CA S>4089. Ensim is the as^gnee <^the 
Application. 

3. I am providing this declaration to establish 

deKaibed and claimed in the A|)plicatton phot to fee^faetiias diies ef¥mted States 




SERIAL NO.: 
FILING DATE- 
TITLE: 

EXAMINER: 
GROUP ARTUNTT: 
ATTY.DKT.no.: 



Patent 6,529,985 to Deianov et al., filedFebruary 4, 2600 (^anov^,and Umt*d 
States Patent 6.754,716 to Sharma et al.,«led February il. 2000 ("Shanna'O, find 
b) due diligence from prior to the effective dates of IManevmd Sha^ 
2000, and Febniary U. 2000, resp«sdvdy) tothe fiUttg^^ 
(Februa^ 14, 200©). The Examiner cited^Daanov ajad Sharm 
dated January 26, 2005. 

Conception 

4. Diuing my em^oymrait with Ensim, I conceived of methods and comptiter 
program products for restricting commumcation of selected processes to a seft of 
specific network addresses (hereafter "the Invention") that are now described and 
claimed in the il^lication. Hus coiiC(q>tL(Bi occurred prior to Februaty 4, 2000, the 
effective date of Deianov, iind February 1 1, 2000, the effective date of Shatma. 

5. Attached hereto as Exhibit A is a redacted version of a true cotrect 
copy of ah iiitranal Eosim document describing the iaventiofl. This document was 
prepared using infonnation piovided by nae to dcxanaeiit &e op^on of the Inyentioii. 
The In^lemaitation described is one embodiment of the claimed invention. ^Tlie 
interception module stotes this iiB&fmatioh in its in an entry of tfte 
form ^qjid, interfece ijifo>'' is an in^>lranentation of claim tanfui^e ♦^tesodaiog at 
least one selected process witii^ least one network addr^s." (This **iaifeimBtiorf* is 
described elsewhere in the document as information about an application to be run<for 
exatxqile, the {plication's process ED) and informatiofi about the iatfcdlm vidfti^di 
the application should be associated (fra exanq)iei the interfece's IP address).) *^Whfin 
the application performs one of the system caUs tiiat ate li^ instqp 4, ;theiiflteffiq»ti<Mi 

2 iiueamvBoesismsri 



module is called by the kemer and ^[ojji a bind systeni calU ihe foUowtog changpsare 
made before the original bind fiinctioii is invbked: If the bind is tt> thfe 1? $ddtess thai 
was supposed to be associated with that pid anyway* Ae caU kaot modified'' is an 
implementation of the claim iafigu^e "deteOTiliiihg whtetlier ati attempted nietworic 
address-based Mmmutucation of a selected piBCeSs fe vtom 
response to a detenniiiation that the communication is via an associated address, 
sdlowing the commimicatipn to jHDceed.'' 

fi. Accordingly, the inventiou deissaribed and claimi^ by to i^irfica4<>i» 
conceived prior to February 4, 2000. 

DiUg^£S 

7. Jeff Brill, a patent attorney, prepared die Applicatidn. Oh January 26, 
2000, Jeff Brill mailed me a first draft of flieAH>Kcalion formy review. Attached 
hereto as ExMhit B is a true acid eoirect copy of theoo^^ 

first draft 

8. I rewewed the firrt draft and, on February 3 aad 4* 2000,^ discussed wiih 
Jeff BriUiny conflhents. Oh Ffebrow7 

Application for my review. Attached hereto as Exhibit C is a true and coirect copy of 
the cover lett» that accompanied this second diaf^ aldi^ with a true aiid edited copy of 
the accompanying mailing reosipL Exhibit C also rrfferencw die conyersattols ftat 

occurred on February 3 and 4, 2000. 

9. I reviewed the second draft and, on Feteuary 9, 2000, discussed with lefif 
BriU my conanfents. Oh February 10, 2000, Jeff Brill rnSiled me a third draft of die 
AppUcatidn for my review aiid exwutidn^ 



correct copy of th6 cover letter flmt accompani^ this iJii^ dfeaft, along vrrft a tiw? and 
correct copy of tiie jaecpmpiEmjing mailing^ receipt Exhibit t> akp t^^^ces 
conversation that occiured on Febniary ^, 2000. 

10. I reviewed and executed tfie Application and returned it to Jeff Brill. The 
executed Application Was filed On February 14. 2000. 

1 1 . Accoidingjy, Ihe Invention was cohstractiv^ly teduced to j^actice on 
February 14, 200G, and diligencci was present froni prior to die effective dates^o 
Deianov and Shatma (February 4> 2000, and February 11^2000, t^pecdvely^ to ll* 
date of constructive reduction to practice. 

I hereby dedare that all statements made herein of my own knowledge are true 
and that all statements made on Mormation and beKef are believed to be teuc; and finther 
that these statements were made with the kndWledg^: that willM fe^ 
like so made are pimishable by fine or imprisonment^ or bothi under secticm 1001 of Title 
18 of the Unic^ Stem Code, and diat such willful false mmmmm^J^^fi^ir^ ^ 
validity of tthe plication or €by patent issued diereon. 



PawaitGoyal 
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1. The faxec ajmponent is Informed, using a mechanisnn such as ils command Ififie or a baitdi atoout 
tlie applfcafk)n to be run and the^ft^^ 

2. The fe)^c mcKiu!e:ui^s| staridard system c^ls to ctetefmiri^ tnfCHritiafton about the ihtt^aoe sudi as Its 
IP adcfr^ ariid , 

3. Th€ f^kete ^^cropon^n^ ioadi^ an intemeptM kernel m^Ui^ contains \^fn It a feansfatk>n.table In^^ 
the-fuhrjteg'kemat ' . ' ,^ 

4. When the fhteroaption rnpjiule Is Inifialized, it ovemnritea tha IcefneFs system c^l table so that the fmk, 
c/ona, arid 0X^^ys;tern calls are diverted to entry points In the intefit^ttoh rniKjula^^ modWes the 
TCP proto^t sSick so that the Wnof and conn^ pfbce^gres are alsd dlvt^ed tovihe Interisepton 
module. 

5. The fecesx component cprnmunicates wl^ the Interoeptfen modula u^ihS any of the standard 
rrtechin%n$ lor useivkf rnel £^ its pm^MV^^^ 

■ d5telned^:in:-^step:^,: - ■ ^ ^ - - ■ - ^ - ^ ^ : ^ ^ 

6. Tha fnterc^tion module stores^ this fetformation in Its trahsfe^n table fei ^ eritfy of ti# form <pid» 

.inteffaceinfo> ^ ........... 

7. if%ially^ tha fe^ oomponant uses tha axec system oalt to mm0j$ its binary fm%0 viTO thai of the 
speoffi^^ap^iGstion.- ■■ - ■ * \. ^, 

8. Whenttiaapfrtfcaitonperfb^ moclu|e 
: is csaltad^by^^the kernels ' t ' ^- ■ ' ^' ^ ' ■ ' ■ " ■ : ' ^ 

9. On a forfc or tsto^ Iranslitidn feiblels updatted sb mat the pld tftesa calls Is 
afsoras^lafc^\^the1h^ ' ^ 

10. Oh w fcir^sy^m c^lf* the following ohanga^ aPe m^e b^lcmM^ <^glhal Irind functtonte Invoted: , 

» If tffe |>ihd is to the P address that jft^s |#po^ % be assocWed with that pkt anyway, «ia 
; ciJris notrnodffM: . , . , .. , - ^ ^ 

• if tffe Wncf |s tojthe localhost* special addretss <jl27,0.0*i) then ihe locaihost arpimait In the 
s^ternoaliism 

♦ iftife bind Is to the ^wildcard ^paciaj address (IN/^DR^Y) itoan tim wlidca^^ argurnent in 
the $)^tem call Is mpdifi^^^ 

» AbMtoanyotheraddre^^^ 
IL On a co/Tfiaci system call the following changes are made before the ortgM connect function 
Invoked • ■ ^ - - ' ^ : - ■ 
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• If ttr0 connect is to the localhosf spe^al address (127.0*0.1) then the (oc^host argument \n 
the system call is moclified f^^^^ 

♦ (f the connect is to the ^«^tdO0^d*specN^a^ then th|w8|lc^rd sfi^ 
system i^lHs modified ftx^^ 

1 • A connecitio^ny ofeef address is unmo^^ 
IZ On an 0xU system call, the translatkat table entry is mamti fbr that pid tsfeft^re Bie tirtglr^ call is 
invoked. 



rENWtCK & WEST UP 

A tiMirtb UABIUtV frARTIIf ittMIP 



January 26, 2000 
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PawffliGdyal 
Ensdm Cpiixnration 
1215 Terra Bella Avenue 
Mountain View, CA 94043 

RE: U5. Patent Application 

Titte: imSTiaenNQ COMMUNICATION 0F 

SMe» PROC^SES lO^ SET OF 

SPECOT^NBfWC 
Liventois: PawahGoyal 
Our Re£: 21816^044iS4 (Case 4464) 

DearPawan: 

I am pleaad to enclose for your itview and comiiiecrts a < 
claims, and diamugs iBar ttie Ri^teictiori of 
(Ensim appIiQation 7). 

Please exa^ 

con^IetraeM of desenj^ ^ 
infbimation tb^ two tllmgS^(l) «^ tp lestoct w 

selected pn)de!me^ 

describe tbe bestwpdc ttiat yonlisiaw of Ibr ^ * 

set of specific lutwoik addr^sesi, as claimed. 

In order to minhnia figfl^ prepmti^ of appKwido^ jH^sc ttoroi^^^ 
review the specdjWoij,^ o and nato dl a 

necrasaiy. Iiwett ad#ionalpag<s o^ 
drawings. 

Ptese note that ibe attarfied pm dmwit^ f ^^^. 

arranged for a tedhnicjEd artist to create foon^ 
United States Patent and Trademaik Office. 

Please note tiiat once die patent 
& Trademaric Office, wewiU lipthe aifte^^ make sia»ttndyec^^ 
without losing the benefit of the^^S^ 



die 




f lease iOTlac*iB€^at<650) 8^^ 
i^pifflig tpi or oito m^^^ 



wmmA& WEST i» 




Jeff Ml 




6)c. C 



TWO ALTO i^UAl^ 
TEL $%pJk9^M0O \ FAX 65MW'W*^ I "^^^"^^ 



Fcbniaiy 7^2000 



VIA FEPEKiyL EXP^SS 
AM No. 8146 1365 g03G 
PawanGoyd 
Exudm Corporation 
1215 Tena Bislto Aves^ 
Moimtak Vitew^ CA 94043 



RE: U.S. P&te^ A]>pUcati<m 

Title: RKlRieiING €OMM^ 

Inventor Pav^ranGdyri 

OurRrf:: 2iyL6r04464(Gasfr44^ 

DearPawan: 

^idosed is the latest ver^on qf:liw^ 
This version <tfflie «5^^ ^matetf^ 
disaissedisdes^edM^^l^^ 

b^imung^tmpage^Ml^^ fbe^u^^ 
ASSKafflaEKfF : 

in&innaticni is cidinct» dale and sign your name ^^soelt^^ 

p]f«iia^ Wto stocmia ffiea date^ sig&andseal 

^v^iere indicated. 

Notr fbat theace ttte two date colui^ cm tfe asat^voent in die &Bt date epliiinn» 
you jshpiild write die date on wUch^you si to ^to secoad (fir 

iigbt) date coItMn* }ix>ii 
Beelan^^ l&aii sMS^ 
pediiralibii. 



PAIO AtTp > SAM r9A»^SieO^^^ASKmt^TiO!H DC 



Pawan Goyal 
February 4, 2000 
Page 2 



SMAbLBNTITY STATEMENT : ^ ; : 

I&ploirerly tldiaiiil small iWity stimi caii result m iinenfbrccable pafieat rigljts. 
Therefore, we have atiachefl an adWenaurn regardiag the qualifica^ for 
claimmg siriaU eritily sta4^ |»lease have K€S 

KeshaV d|teraiines that entMemeEt to entity status is appropriate, please 
have Kcslav dbte and sign the Small Entity Statement where indicated. 



abstraot and drawin^i to me in the enclosed return Federal Exrpress envdope; 

Please contact me at (630| 858-7291 ifyou. have any questions or coimnents 
regarding, this or. other naa^ ., . . . ^ ^- , 

'^^^ ' ' ^ Sincei^ly, ' " " 



JeffBritt 

ec: Robert Sa<^(w/ocntlosu 



JEFFBRU 



AiibmNo;8121 4255 73M 
PawanXjoyal 
En$im Goipcmiti0n 
1215 Teiia Bdlfl Avmue 
Moimtaiii VieWi GA 94043 



RE: tJ.&Palea^tJ|^ 
Htle: 

SHLBCIbD PRddl^ TO ASET OP 



OurRe£: 



PawanOdycyi 
2181^^)4464 (Gasp 44^) 



D^Pawm: 

disca$8edis icmi^cs 47 alid IfiliU appEcafio&is I 



abstcactiDaAdrs^^ 
you on F«iznuay 7» 2000. 

flm^mtm Bite«t (^03 858^7291 ii 
re jBnMi% Ads or 





JdffBnil 



Enclosures 

cc: Robcit Sachs (w/6 enclosmes) 
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